support

Support

Report a problem or suggest a feature to the vendor from a self-hosted install, and see the vendor's status and replies (self-hosted installs only).

5 endpoints

GET `/api/v1/support/submissions`

What this institute sent the vendor, newest first (cursor-paginated): the text, whether it has left the install, what the vendor did with it and the vendor’s replies. Self-hosted only.

Requires authenticationScopesupport.submit

Path & query parameters

Name	In	Type	Constraints
cursor	query	string	—
limit	query	integer	1–100 · default: 25

curl example

curl

curl -X GET "https://your-institute.example/api/v1/support/submissions" \
  -H "Authorization: Bearer $INSTITFLOW_API_KEY"

Responses

200A page of submissions.

Name	Type	Constraints
datarequired	array<object>	—
nextCursorrequired	string \| null	—

json

{
  "data": [
    {
      "id": "37386ae0-3738-7738-8386-37386ae03738",
      "kind": "problem",
      "category": "login_access",
      "title": "Midterm Exam",
      "body": "string",
      "delivery": "queued",
      "lastError": "string",
      "remoteStatus": "new",
      "createdAt": "2026-03-02T09:00:00.000Z",
      "sentAt": "2026-03-02T09:00:00.000Z",
      "syncedAt": "2026-03-02T09:00:00.000Z",
      "replies": [
        {
          "id": "37386ae0-3738-7738-8386-37386ae03738",
          "body": "string",
          "createdAt": "2026-03-02T09:00:00.000Z"
        }
      ]
    }
  ],
  "nextCursor": null
}

400The request could not be read at all — unparseable body, unusable content type, oversized payload (`MALFORMED_REQUEST`). Never a schema failure: those are 422.

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

401Missing, expired or invalid credentials (`UNAUTHORIZED`, `TOKEN_INVALID`, `SESSION_REVOKED`).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

402The tenant’s subscription or license is locked (`PAYMENT_REQUIRED`, `SUBSCRIPTION_SUSPENDED`).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

403Authenticated, but not allowed (`FORBIDDEN`, `FEATURE_DISABLED`, `QUOTA_EXCEEDED`, …).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

404No such resource, or it is not visible to this tenant (`NOT_FOUND`).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

409Conflicts with current state (`CONFLICT`, `VERSION_CONFLICT`, `IDEMPOTENCY_KEY_REUSED`).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

422The request was read but its content is not acceptable: body/query/path/header failed schema validation (`VALIDATION_ERROR`, with `details.issues`), or a domain rule rejected a well-formed value (`VIDEO_URL_INVALID`, …).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

429Rate limit exceeded — see the `RateLimit-*` and `Retry-After` headers (`RATE_LIMITED`).

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

500Unexpected server error (`INTERNAL_ERROR`). Never carries a stack trace or SQL.

Returns the shared `ErrorEnvelope` — `{ error: { code, message, requestId, details? } }`. Every code is listed in the Conventions guide.

POST `/api/v1/support/submissions`

Report a problem or suggest a feature to the vendor. Saved here first and sent in the background, retried if the vendor cannot be reached. Do not include personal data. Self-hosted only.

Requires authenticationScopesupport.submit

Request body

Name	Type	Constraints
kindrequired	enum: "problem" \| "feature"	—
categoryrequired	enum: "login_access" \| "people" \| "attendance" \| "billing" \| "courses_content" \| "notifications" \| "updates_backups" \| "performance" \| "other"	—
titlerequired	string	1–120 chars
textrequired	string	1–4000 chars

Example

json

{
  "kind": "problem",
  "category": "login_access",
  "title": "Midterm Exam",
  "text": "string"
}

curl example

curl

curl -X POST "https://your-institute.example/api/v1/support/submissions" \
  -H "Authorization: Bearer $INSTITFLOW_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "kind": "problem",
    "category": "login_access",
    "title": "Midterm Exam",
    "text": "string"
  }'

Responses

201The saved submission, queued.

Name	Type	Constraints
idrequired	string (uuid)	—
kindrequired	enum: "problem" \| "feature"	—
categoryrequired	enum: "login_access" \| "people" \| "attendance" \| "billing" \| "courses_content" \| "notifications" \| "updates_backups" \| "performance" \| "other"	—
titlerequired	string	—
bodyrequired	string	—
deliveryrequired	enum: "queued" \| "sent" \| "failed"	—
lastErrorrequired	string \| null	—
remoteStatusrequired	enum: "new" \| "acknowledged" \| "in_progress" \| "resolved" \| "declined" \| "duplicate" \| null \| null	—
createdAtrequired	string (date-time)	—
sentAtrequired	string (date-time) \| null	—
syncedAtrequired	string (date-time) \| null	—
repliesrequired	array<object>	—

json

{
  "id": "37386ae0-3738-7738-8386-37386ae03738",
  "kind": "problem",
  "category": "login_access",
  "title": "Midterm Exam",
  "body": "string",
  "delivery": "queued",
  "lastError": "string",
  "remoteStatus": "new",
  "createdAt": "2026-03-02T09:00:00.000Z",
  "sentAt": "2026-03-02T09:00:00.000Z",
  "syncedAt": "2026-03-02T09:00:00.000Z",
  "replies": [
    {
      "id": "37386ae0-3738-7738-8386-37386ae03738",
      "body": "string",
      "createdAt": "2026-03-02T09:00:00.000Z"
    }
  ]
}